Skip to main content

TrendAI™
セキュリティブログ

TrendAI Security Blog

注目のブログ

Two Critical PHP Flaws Leaked Before the Patch
エクスプロイトとゼロデイ
パッチ公開前に情報が流出した2件の重大なPHP脆弱性：組織が今すぐ取るべき対応

10月20日15:20（UTC）、Hacker Newsへの投稿を通じて、リモートコード実行につながるおそれのある2件の重大なPHP脆弱性の詳細が流出しました。投稿は削除されましたが、スクリーンショットがXとMastodonで拡散されました。

2026年10月22日
TrendAI™ Research
Read article
Two people talking in front of the workstation
エクスプロイトとゼロデイ
eMudhraのCA秘密鍵8件が侵害：何が起き、組織は今何をすべきか

eMudhraの中間CA秘密鍵8件が侵害され、その一部はわずか3ビットという脆弱なものでした。コード署名に伴うリスクと、不正利用を調査してセキュリティ上の穴をふさぐために組織が取るべき対応について、TrendAI™が解説します。

2026年10月21日
TrendAI™ Research
Read article
What a Week for CISOs: PHP, eMudhra, and the Questions Your Board Will Ask
エクスプロイトとゼロデイ
CISOにとって試練の1週間：PHP、eMudhra、そして取締役会から問われること

2件の重大なPHP脆弱性がパッチ公開前に漏洩し、同じ日にMozillaはeMudhra認証局の鍵の強度不足を公表しました。本記事では、TrendAI™ Global CISOのSundari Parekhが、セキュリティ責任者に向けて実践的な対応策を解説します。

2026年10月21日
Sundari Parekh
Read article

ブログ記事を検索

マルウェアBotnets暗号資産
Cryptocurrency Miner Uses Hacking Tool Haiduc and App Hider Xhide to Brute Force Machines and Servers

The cryptocurrency-miner, a multi-component threat comprised of different Perl and Bash scripts, miner binaries, the application hider Xhide, and a scanner tool, propagates by scanning vulnerable machines and brute-forcing (primarily default) credentials.

January 9th, 2020 Augusto Remillano II, Jemimah Molina
Read Article
エクスプロイトとゼロデイ
Patched Microsoft Access ‘MDB Leaker’ (CVE-2019-1463) Exposes Sensitive Data in Database Files

Researchers uncovered an information disclosure vulnerability (designated as CVE-2019-1463) affecting Microsoft Access, which occurs when the software fails to properly handle objects in memory.

January 8th, 2020 2 min read TrendAI™ Research
Read Article
サイバー犯罪
Web Skimming Attack on Blue Bear Affects School Admin Software Users

A web skimming attack was used to target a school administration software that handles school accounting, student fees, and online stores for K-12 and other educational institutions.

January 7th, 2020 2 min read TrendAI™ Research
Read Article
ランサムウェアと恐喝
Ransomware Recap: Clop, DeathRansom, and Maze Ransomware

As the new year rolls in, new developments in different ransomware strains have emerged. Here we discuss the different techniques that Clop, DeathRansom, and Maze ransomware use and the ways users and organizations can protect themselves against infection.

January 6th, 2020 4 min read TrendAI™ Research
Read Article
APT
First Binder Exploit Linked to SideWinder APT Group

We found malicious apps that work together to compromise devices and collect user data. One of the apps, called Camero, exploits CVE-2019-2215, a flaw that exists in Binder. This is the first instance in the wild that exploits said UAF vulnerability.

January 6th, 2020 5 min read Ecular Xu, Joseph C Chen
Read Article
ASM ASRM
A MyKings Retrospective: Using the MITRE ATT&CK Matrix for Increased Visibility

We take a closer look at an incident involving the MyKings botnet to show how the MITRE ATT&CK framework helps with threat investigation.

December 20th, 2019 7 min read TrendAI™ Research
Read Article
暗号資産
Defending Systems Against Cryptocurrency Miner Malware

A look into cryptocurrencies' state and how cybercriminals abuse miner malware to profit at the expense of legitimate businesses, how to find signs of infection, and recommendations to defend systems from its abuse.

October 28th, 2019 7 min read TrendAI™ Research
Read Article
Cloud security
The Cloud: What it is and what it's for

From powering video streaming, web-based apps, customer relationship management (CRM) systems, mobile banking, inventory, and big data analyses, the cloud is helping empower businesses of all sizes to focus on innovation rather than infrastructure.

October 24th, 2019 7 min read TrendAI™ Research
Read Article
エクスプロイトとゼロデイ
Security 101: Zero-Day Vulnerabilities and Exploits

A zero-day attack exploits an unpatched vulnerability. Until a patch becomes available, it is often a race between threat actors trying to exploit the flaw and vendors or developers rolling out a patch to fix it.

October 2nd, 2019 9 min read TrendAI™ Research
Read Article
サイバー脅威
Skidmap Malware Uses Rootkit to Hide Mining Payload

Skidmap, a Linux malware that we recently stumbled upon, demonstrates the increasing complexity of cryptocurrency-mining threats. This malware is notable for how it loads malicious kernel modules to keep its cryptocurrency mining operations hidden.

September 16th, 2019 5 min read Augusto Remillano II, Jakub Urbanec, Wilbert Luy
Read Article